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APPENDIX 

1 1 . A method for protecting the security of a cookie stored within a data processing system, 

2 said method comprising: 

3 storing a encryption key pair having a private key and a public key in a protected 

4 storage device Tvithin said data processing system; 

5 in response to the receipt of a cookie generated by an application firom a remote 

6 server^ encrypting said cookie with said public key; 

7 storing said encrypted cookie in a non-protected storage device within said data 

8 processing system; 

9 in response to an access request for said encrypted cookie by a browser program 

10 executing within said data processing system, decrypting said encrypted cookie with said 

11 private key; and 

12 sending said decrypted cookie to said browser program. 

1 2. The method according to claim 1, wherein said non-protected storage device is a hard 

2 drive. 

1 3, The method according to claim 1, furttier comprising providing an encryption device 

2 having an encryption engine and said protected storage device accessible only through said 

3 encryption engine. 

1 4. The method accorditxg to claim 3, wherein said encrypting further include encrypting said 

Z cookie utili2jxig said encryption device. 
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1 5. The method according to claim 4, wherein said decrypting further includes decrypting said 

z encrypted cookie utilizing said eacryption device. 

1 6. The method according to claim 5, wherein said smditig ftmcther includes transmitting said 

2 decrypted cookie from said encryption device to said browser program, 

1 7. The method according to claim 6, further comprising transmittiQg said deciypted cookie 

z from said browser program to an application executing in a remote server. 
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I 10. A data processing system capable of protecting the security of a cooMe stored within said 
z data processing system, said data processing comprising: 

3 a protected storage device for storing a encryption key pair having a private key 

4 and a pubhc key in a protected storage device within said data processing system; 

5 means for utilizing said public key to encrypt said cookiC;, in response to the 

6 receipt of a cookie generated by an application from a remote server; 

7 a non-protected storage device within said data processing system for storing 

8 encrypted cookie; 

9 means for utilizing said private key to decrypt said encrypted cookie, in response 

10 to an access request for said encrypted cookie by a browser program executing within said 

II data proces$mg $ystetti; and 

12 means for sending said decrypted cookie to said browser program. 

1 IL The data processing system according to claim 10, wherein said non-protected storage 

2 device is a hard drive. 

1 12. The data processing system according to claim 1 0, jEurther comprising an encryption device 

2 having an encryption engine and said protected storage device accessible only through said 

3 encryption engine, 

1 13. The data processing system according to claim 12, wherein said means for utilizing said 

2 public key to encrypt said cookie is said encryption engine. 

J 14. The data processing system according to claim 13, wherein said means for utilizing said 

2 private key to decrypt said encrypted cookie is said encryption device, 
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1 15- The data processing system accordmg to claim 14, wherein said sending meaos fttrther 

2 includes means for transmitting said decrypted cookie from said encryption device to said browser 

3 program. 

1 16. The data procesising system according to claim 15, further comprising meaixs for 

2 transmitting said decrypted cookie from said browser program to an application executing in a 

3 remote server. 
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